Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
sims
New Contributor III

Assymetric routing

Hi,   Vdom A learning route for 10.0.2.0/24  from R1 and  Vdom Root learning from another router R2   And there is  inter vdom routing between A and R1 ,    So the cost is same , do I need enable asymmetric in that case ?    Thanks    
3 REPLIES 3
Grave_Rose
New Contributor III

Hey sims,

 

Asymmetric routing is always problematic in any environment and I would suggest fixing the root issue of the routing instead of trying to make it work like that. That being said... Do you need to use the VDOM link between VDOM-A and VDOM-Root as a transit link in the event that R1 or R2 has an issue? Are you using OSPF with the VDOM link? If so, you can add cost to the VDOM link OSPF interfaces on each VDOM so that they won't be used unless there's an issue with the "main" link. See this document for more information: https://help.fortinet.com/fos50hlp/54/Content/FortiOS/fortigate-advanced-routing-54/Routing_OSPF/Con...

 

Hope this helps,

 

Sean (Gr@ve_Rose)

Site: https://tcpdump101.com Twitter: https://twitter.com/Grave_Rose Reddit: https://reddit.com/r/tcpdump101 Discord: https://discordapp.com/invite/2MZCqn6
sims
New Contributor III

Hi,

Thanks for the reply . but what if  we need an active /active deployment 

Thanks

Grave_Rose
New Contributor III

Hey sims,

 

So you want traffic hitting VDOM-A to load balance out a physical interface of VDOM-A as well as go across the VDOM link to exit out of a physical interface on VDOM-Root? Do I have that right?

 

Sean (Gr@ve_Rose)

Site: https://tcpdump101.com Twitter: https://twitter.com/Grave_Rose Reddit: https://reddit.com/r/tcpdump101 Discord: https://discordapp.com/invite/2MZCqn6
Labels
Top Kudoed Authors